KeepKey review

KeepKey has one specific problem, and it is not the one it usually gets accused of. In 2019 Kraken Security Labs showed that the seed can be pulled off a KeepKey by anyone who holds the device for about 15 minutes with roughly 75 dollars of glitching equipment, which yields the encrypted seed, and the 1 to 9 digit PIN protecting it is trivial to brute force afterwards. Kraken's conclusion was that the flaw is in the microcontroller rather than the code, so no firmware update can close it. Buy one only if the thing you are defending against is malware and phishing rather than a burglary, and turn on the BIP39 passphrase either way.

KeepKey does not hide any of this, which is worth saying plainly. Its product page names the chip, an STM32F405 ARM Cortex-M4, publishes the hardware schematics, the PCB layout and the bill of materials on GitHub, and lists "no proprietary secure element" as a design choice rather than an omission: every part is off the shelf, so anyone can audit the board or build one. That is a real argument, and it is the one Ledger cannot make, since its hardware design and device OS are closed. The cost of it is the attack above, because a general purpose microcontroller is not built to keep a secret from someone holding the board, and Kraken's paper says exactly that about this family of chips.

KeepKey's own site dates the brand to 2014 and ships from Denver, Colorado. It stood out for one thing: a 3.12 inch OLED screen, the largest of its era, which made verifying an address on the device genuinely readable. The exchange ShapeShift bought the company in August 2017 and cut the price aggressively to grow its user base, and when ShapeShift dissolved into a DAO in July 2021 the wallet passed out of its hands.

The firmware is maintained, which is worth stating plainly because the storefront does not show it. keepkey.com sells the Gen 3 device at $59.95 and promises free firmware updates for life without publishing a release history; the repository at github.com/keepkey/keepkey-firmware carries the actual record. Version 7.10.0 added Taproot outputs in February 2025, 7.14.0 added Solana, Tron, TON and Zcash in April 2026, and 7.14.1 followed in June 2026 with further signing types and what its notes call security hardening across signature validation and message handling. Release tags are signed, and each release publishes the expected hash of a reproducible Docker build, so the binary you flash can be checked against the source. Development is slower than the rest of the field, with an eleven month gap between the March 2024 and February 2025 releases, but slow is not the same as abandoned.

So the warning here is about the hardware, not neglect. If you keep real savings on a KeepKey, either enable a BIP39 passphrase, which is never written to the device and therefore survives the attack, or move to a device built around a secure element: a Trezor Safe model, a current Ledger, or a BitBox02. If you move, generate a fresh seed on the new device rather than importing the old one, since the old seed has spent its life on hardware with a known physical weakness.